Cyberdefense

natashasruiz@outlook.com published in Science Magazine 17/04/2020 https://science.sciencemag.org/content/317/5842/1178/tab-e-letters

1. Does privacy exists?

Analysing software business rules that impact privacy and cybersecurity is an
important part of computer science. 
I want to explain how the relevant papers form a coherent body of work, demonstrates
2

methodological and conceptual rigour, and articulates the original contribution to the field and
the importance of how Cybersecurity in The First Line of the First Code is important.
If we consider that the most important, most rich and most influencer companies in
the software market as involved in the problems that my research expose. And these companies
seek to hire the best professionals. And even though these professionals in general, come from
the best universities. It makes perfect sense to question your concepts and curricula. In
analysing the relation of the interdependence between entities of the cyber cosmos.

Natasha Ruiz, PhD candidate, School of Computing and Digital Media,
London Metropolitan University
Advisors 
Dr Pancham Shukla
Senior Lecturer & Course Leader 
(Communications Technology and Mathematics)
School of Computing and Digital Media (SCDM)
London Metropolitan University

Prof. H. Kazemian, B.Sc, M.Sc, PhD, FIET, FBCS, C.Eng.,
Senior manager for research degree, chair of RSPG and PhD coordinator,
Head of Intelligent Systems Research Centre,
School of Computing and Digital Media,
London Metropolitan University

Ce 21e siècle assiste à l’aboutissement des technologies numériques, comme le 19e siècle a vu celui de la révolution industrielle. En effet, le monde est désormais ancré dans un contexte de cyberguerre, marqué par la hausse de la cybercriminalité. Le Gabon ne doit pas se laisser surprendre. D’autant plus qu’avec la mise en place progressive d’un certain nombre de projets de développement basés sur une connexion Internet par fibre optique, destinés à faire du pays un « hub des Technologies de l’Information et de la Communication (TIC) » en Afrique Centrale, il est clair que le pays est promis à un bel avenir. Il n’en demeure pas moins qu’il doit aujourd’hui anticiper les évolutions à venir. C’est pourquoi, le rythme d’avancement de la cybercriminalité dans le pays, impose aux décideurs publics une révision complète des fondements de la doctrine en matière de numérique à l’aune du développement fulgurant des TIC. Il est plus qu’urgent pour le Gabon, de revoir ses concepts sur la sécurité et la défense, de décloisonner les savoirs sur la cybercriminalité et surtout d’envisager les nouveaux défis de façon résolument prospective.

Rapports de forces, cyberattaques sur les infrastructures, hacking, espionnage, fake news, le cyberespace est devenu en quelques décennies un champ privilégié des relations internationales où coopèrent et s’affrontent anciens et nouveaux acteurs de la conflictualité, étatiques et non étatiques, publics et privés, civils et militaires.
Les enjeux sont considérables car la plupart des activités humaines dépendent aujourd’hui de l’interconnexion des systèmes de traitement de l’information permise par les réseaux numériques. Or, les menaces associées à la digitalisation de la société ont profondément transformé la manière de concevoir les conflits contemporains. Elles ont amené les États et les principaux acteurs de la sécurité à repenser leurs politiques, leurs architectures et leurs stratégies de défense sur la scène internationale.
Ce domaine doit être appréhendé de manière globale, au croisement des approches politiques et géopolitiques, stratégiques et juridiques, économiques, techniques et sociotechniques. Cet ouvrage présente de manière concise et accessible l’ensemble des connaissances disponibles aujourd’hui sur le sujet de la cyberdéfense et de la gestion de crise dans l’espace numérique. Rédigé par de nombreux spécialistes, universitaires et praticiens, il offre une vision large et pluridisciplinaire des enjeux de la cyberconflictualité.

The technological transformation story of Azerbaijan is marked by the popular embrace of digital banking, implementation of centralized e-government services, and the automation of critical energy infrastructure. However, this march towards modernization brings with it inherent vulnerabilities, which make cybersecurity an emerging critical frontier. Cybersecurity is a new paradigm, where traditional concepts of security falter as national boundaries blur and perpetrators often remain shrouded in anonymity. In this new territory Azerbaijan confronts three primary challenges: the difficulty in establishing clear cyber trigger lines akin to physical borders, the near impossibility of attributing attacks and assigning responsibility, and the daunting task of developing proportionate countermeasures in an evolving and unregulated domain. This paper argues how through a comprehensive and proactive cyber-defense strategy, Azerbaijan can not only shield its critical infrastructures and government databases but also establish a resilient digital presence in the global arena.

An Interview on the ongoing war in Ukraine

PPTX
https://www.academia.edu/73729503/UKRAINE_WAR_RUSSIAs_INVASION_https_www_academia_edu_73729503_UKRAINE_WAR_RUSSIAs_INVASION

http://fino-a-prova-contraria.blogautore.espresso.repubblica.it/2022/03/12/roma-guerra-in-ucraina-una-intervista-al-professor-marco-mayer-luisslink-campus/

Cyberspace changed the entire international safety and security scale. It compulsory obligated the introduction of new methodologies, strategic actions and technologic capability due to its transnational and transversal identity, as well as, because of its inherent characteristics.
The need of an international cooperation more intense, accurate and effective emerged from the increasing of cyberspace treats. In the present work we will elaborate more on this subject as well as the way it influenced the international scale of powers. Moreover we will address the importance of establishing borders in cyberspace that maintain an equivalent to the legal and physical system already existing.

http://hdl.handle.net/10362/14300

This book offers a comprehensive analysis of the international law applicable to cyber operations, including a systematic examination of attribution, lawfulness and remedies. It demonstrates the importance of countermeasures as a form of remedies and also shows the limits of international law, highlighting its limits in resolving issues related to cyber operations. There are several situations in which international law leaves the victim State of cyber operations helpless. Two main streams of limits are identified. First, in the case of cyber operations conducted by non-state actors on the behalf of a State, new technologies offer various ways to coordinate cyber operations without a high level of organization. Second, the law of State responsibility offers a range of solutions to respond to cyber operations and seek reparation, but it does not provide an answer in every case and it cannot solve the problem related to technical capabilities of the victim.

Cybersecurity is an issue that involves governments, private companies and citizens. The dependency that all social and economic sectors have on the information and communication infrastructure has increased extraordinarily and it is difficult and complex to manage. We wonder about the set of elements that make it inherently vulnerable, and if it is possible to make decisions that allow to increase its resilience and sustainability. In this paper, an effort is made to review such aspects that make weak our technology assets and, as a consequence, the society we have created around them. After the review of several technical and social issues, some alternatives are depicted with the aim to think about them.

Artykuł prezentuje wyniki badań dotyczące systemu bezpieczeństwa cybernetycznego Republiki Estonii. Autor przedstawia estoński model obrony cybernetycznej w ujęciu strategicznym oraz rozwiązania prawne, a także prezentuje militarne i niemilitarne organy państwa odpowiedzialne za cyberbezpieczeństwo. W podsumowaniu autor odpowiada na pytanie, które estońskie rozwiązania prawno-organizacyjne mogłyby być skutecznie zaadaptowane do polskiego systemu cyberbezpieczeństwa.
The article introduce the results of research on the cybersecurity system of the Republic of Estonia. The author presents the Estonian model of cyber defence in a strategic perspective and legal solutions, as well as show military and non-military state institutions responsible for cybersecurity. In summary, the author answers the question which Estonian legal and organizational solutions could be effectively adapted to the Polish cybersecurity system.

Artigo desenvolvido no âmbito duma unidade curricular da Pós-Graduação em Cibersegurança e Ciberdefesa da Academia Militar / Universidade do Minho (Portugal) em setembro de 2017. Este faz uma revisão da literatura e tece algumas considerações sobre a aplicação das técnicas de Data Mining, incluindo o Machine Learning, nas áreas da Cibersegurança e Ciberdefesa.

Cyberspace is a new challenge for the global security and stability and poses numerous threats for the protection of national critical infrastructures. This paper analyses the way the European Union adjusts to these threats, by adapting new policies and establishing the development of relative institutions regarding cybersecurity and cyber-defence. The aim is to critically assess the ability of the EU to act as a reliable security provider in cyberspace. Recent developments indicate that the EU needs to overcome its institutional fragmentation and become a resilient actor in cyberspace.

One of the biggest challenges faced in building the capacity of armed forces to operate in cyberspace is to attract, improve and retain expert staff. Cyberspace is, after all, the only operational domain that has been entirely created by people, so people have to be able to use it and also to constantly create it anew.
According to the estimates cited e.g. by ENISA in 2019, there was a shortage of over 4 million cybersecurity specialists on a global scale, and approx. 65% of organisations declared staff shortages in the area of tasks related to cybersecurity. A real race for specialists in this domain is observed among both international corporations and domestic companies from plenty of industries, critical infrastructure operators and, finally, intelligence services. In this inter-sectoral, global competition, the public sector (which includes the military) is often in a difficult situation because of the limited possibilities of using financial incentives.
Considering the needs and constraints, a resources-building strategy should be adopted that uses all the advantages found within the range of influence of the military sector. The article discusses them using various approaches, based on actions successfully implemented by the Polish Ministry of National Defence under the programme of capacity building in the armed forces to operate in cyberspace. The first aspect the image, motivation and challenges. Service in the cyber armed forces component provides the opportunity to reach areas unattainable anywhere else, including constant interaction with a well-prepared and highly motivated enemy. The second point for consideration is education and continuous improvement. The possibilities to recruit experts who already have a good position in the commercial market are limited. Therefore, development of the military education system is the best way to ensure a steady inflow of staff. In Poland, it was decided both to use military academies for this purpose and a real educational ecosystem is being created and constantly developed, also including a military IT secondary school and a dedicated non-commissioned officer school. Civilian secondary schools run (in co-operation with the Ministry of National Defence, MON) profiled vocational training classes, students of civilian universities undergo military training in cybersecurity, and the performance improvement will be managed by the Expert Cybersecurity Training Centre. The third aspect is the Territorial Defence Force, which gives the opportunity in the Cyberspace Operations Team to combine military service and to continue previous professional work on an extremely competitive market.

The present article analyzes how the cyberdefense, as a public problem, became a new space of dispute between the political actors that, in the bureaucratic scenario, bid for its definition between principles of the XXI Century and the year 2014. The definition was not indifferent for the Argentine Republic for at least three (3) reasons. In the first place, cyberspace put in "check" the organic and functional separation-not blunt-between defense and internal security. Second, the decision on how to resolve this separation from the problems that cyberspace represented for the national security of Argentina, military actors and those from other jurisdictions sought to appropriate the issue in order to generate organizations and obtain budgetary resources. Finally, the Army, the Navy and the Argentine Air Force bid with the Joint Chiefs of Staff, not because of the definition, but rather on who should operate in cyberspace and how. This process culminated in 2014 with the creation of the Joint Cyber Defense Command and a definition of cyber defense that conformed to the porous limit defined by the internal security and national defense laws.

Description about several policies and strategies for protecting Argentinean and coalition critical infrastructure: the functions of the Armed Forces Scientific and Technical Research Infrastructure Institute, a joint military organization that possesses an information security laboratory. The Argentine Defense Forces’ creation of “computer
science troops” in its Communications and Computing Systems Command.

This special issue of the Journal of Strategic Security is a timely response to something of a modern mystery. It is timely because it is difficult to read or watch television these days without coming across some reference to drone warfare or
the complex questions revolving around unmanned aerial vehicles (UAV). It is a bit of a mystery, however, because despite this pervasiveness of drones in the news there are relatively few scholarly efforts to rigorously and comprehensively
cover the issues that flow from their use.

Nel corso dei prossimi anni le innovazioni tecnologiche attuali e future avranno un crescente impatto sugli eserciti occidentali, in particolare quelle che riguardano le tecnologie dell'informazione e della comunicazione, l'intelligenza artificiale e il cloud. Il singolo soldato continuerà a rappresentare l'elemento fondamentale dell'esercito, ma dovrà essere connesso con i diversi assetti disponibili in modo sempre più esteso, efficiente e sicuro. Ciò andrà fatto tenendo conto dell'esperienza acquisita tramite precedenti e spesso insoddisfacenti sforzi volti all'ottenimento di capacità netcentriche. Le innovazioni in vista avranno effetti significativi in termini di letalità, mobilità, protezione ed efficienza energetica della fanteria, e rispetto all'addestramento. All'interno del più ampio contesto strategico e tecnologico, Stati Uniti, Francia, Germania, Italia, Regno Unito e Israele rappresentano importanti casi da esaminare, così come gli sviluppi interni alla Nato e all'Unione Europea. Le conclusioni dello studio delineano alcuni temi e sfide comuni, con lo sguardo rivolto ai possibili futuri passi, soprattutto per l'Italia e gli altri alleati europei.

Over the next years, ongoing and future technological innovations, especially related to information communication technology (ICT), artificial intelligence (AI) and cloud will have an increasing impact on Western armies. The soldier will remain the army’s primary element, but will need to be more and better connected in a secure way with the various assets at disposal, also learning the lessons from previous and often disappointing efforts towards net-centric or network-enabled capabilities. Moreover, innovations will be significant in terms of lethality, mobility, power generation and protection, as well as in training. Within the broader strategic and technological context, the US, France, Germany, Italy, Israel and the UK are important cases to consider, together with developments within NATO and EU frameworks. The conclusions outline a number of common themes and challenges, with a view to the way ahead particularly for Italy and other European allies.

[...] as there are a growing number of jurists who recognise the existence of a Computer Law branch, how can one account for the inefficiency of the rule of criminal law, as far as dissuading and preventing the typical, illegal and punishable act? Why are there inconsistencies in technology related legislation between its regulatory sense and its correspondence with real life?
The answer to these questions can be found in, at least, four ideas or dimensions: technological advance, time, the “nature” of cyberspace and its relationships with other spaces of human existence.

Cyber defense, as a public problem, became a new space
of dispute between political actors who, in the bureaucratic
scenario, pushed for its definition between the beginning
of the 21st century and 2014. In a previous article (Eissa, et
al., 2019) it was argued that the definition of cyber defense
is not innocuous for at least three (3) reasons. In the first
place, cyberspace puts in “check” the organic and functional
separation between defense and internal security. Secondly,
the decision on how that separation was to be resolved
when facing the problem that cyberspace represented for
the national security of Argentina. Lastly, the Armed Forces,
together with the Joint Chiefs of Staff, pushed for the definition
of cyber defense to evade the limits defined by the laws of
internal security and national defense.
This article aims to analyze the changes that may have been
made since the presidency of Mauricio Macri (2015-2019), in
the light of the modification of Decree No. 727/2006 and the
approval of the Defense Policy Directive (DPDN) 2018 which
allowed the defense system to intervene against threats of
transnational origin.

La presente investigación se centra en analizar la importancia de comprender el ciberespacio como un nuevo espacio
de conflicto entre las naciones, un dominio que necesita una gramática de seguridad para la defensa de la soberanía y el papel
que éste ocupa dentro de la estrategia de seguridad nacional, con
énfasis en América Latina y, en especial, en México. En el primer
apartado se realiza una breve discusión en torno a la comprensión
del ciberespacio desde la teoría de la guerra, el constructivismo y el
neorrealismo. En la segunda se expone en qué momento el internet
sufre un proceso de securitización, el ciberespacio se integra como
un dominio vital para garantizar la seguridad nacional, así como una
definición en torno a ciberamenazas al Estado. En el tercero se presentan una contextualización sobre los entornos regionales y globales de ciberseguridad y la brecha de América Latina. Por último,
se presenta una propuesta para la creación de la Agencia Nacional
de Ciberseguridad, desde el enfoque prospectivo de los escenarios
vuca, que puede servir a México en el futuro para enfrentar los retos de la ciberseguridad.

El escándalo Snowden no sólo ha puesto de manifiesto el programa de ciberespionaje masivo realizado por Estados Unidos sobre sus aliados y potenciales adversarios; sino también la vigilancia por defecto (surveillance by default) que puede estar integrada de fábrica en una gran cantidad de tecnologías que utilizamos en nuestras vidas diarias. Este documento de opinión pretende poner de manifiesto este hecho y sus posibles implicaciones para nuestras sociedades. Abstract: The Snowden scandal has not only revealed the massive cyberspionage performed by the United States against its allies and potential adversaries; but also the surveillance by default capabilities integrated in a number of technologies we use in our daily lives. This document is aimed at exposing this fact and its possible effects to our societies.

This article  argues that despite the technical-functional nature of cybersecurity, twin imperatives of market economy and national security have always driven the national and international cyberspace security policy and contributed to the emergence of an international understanding that associates cyberspace security first and foremost with the protection of critical information infrastructures (CII). This article elaborates this argument in three sections. The first section reviews the manifold conceptualizations of cyberspace and cyberspace security underlining the broadening of the concept of cybersecurity from security of computer systems to the ability of an actor to protect itself from a variety of risks to and through cyberspace. The second section shows how economic imperatives have driven the protection of CII as a cooperative objective for the functioning of the global market economy, and the final section focuses on how national and transnational security imperatives have driven the emergence of a norm on preventing cyber-attacks on CII.

Security experts argue that cyberspace has added a new strategic environment that requires new approaches to defence and thereby deterrence. The hard reality of cyber-attacks, which can be asymmetric and non-attributable, force states to reconsider their deterrence policy. Security experts need to untie the Gordian knot of cyber-deterrence. Questioning whether states can deter state-executed cyber-attacks against their critical infrastructure and whether that can be achieved by denial or punishment, is the task of this essay. The purpose is to demonstrate that the Cold War model of nuclear deterrence, which involves denial and punishment, seems dysfunctional in cyberspace.

Por derecho propio, el ciberespacio se ha convertido en el quinto dominio de las operaciones militares tras la tierra, los mares, el aire y el espacio. Aunque a diferencia del resto de los entornos donde se combate, éste tiene una dimensión física y virtual; por lo que cualquier suceso que ocurra en el ciberespacio tiene efectos en el mundo físico y viceversa. Para defenderse en un medio en el que los adversarios se mueven de manera casi invisible y atacan con impunidad, es esencial la coordinación entre los diferentes guardianes del ciberespacio. Este artículo pretende mostrar las organizaciones e iniciativas de coordinación que existen en otros países para facilitar la compartición de la información y contribuir a la defensa colectiva del ciberespacio en materia de prevención y respuesta a incidentes de seguridad. El boletín CIBER completo del Real Instituto Elcano se puede encontrar en: http://bit.ly/1FahKzw